Towards an analytic model of security flaws

Tofts, Chris ; Monahan, Brian

HP Development Company

关键词: security;    models;    flaws;    branching process;    analytic;   

RP-ID  :  HPL-2004-224

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

A simple model of the dynamics of flaws within a software security system is presented. We demonstrate how this model can be fully captured by a Galton- Watson branching process and thus can be effectively calculated upon. Using the limit behaviour of a Galton-Watson branching process, we can demonstrate how a multi-layered security system can become secure even with 'poor' flaw correction. Finally we make some observations about how the parameters of our models can be estimated and how further results from branching processes could be exploited within security systems. 9 Pages